From 2a034c6b66eed8ecd282a8ec357dffad5f013d3e Mon Sep 17 00:00:00 2001
From: r3dg33k <2913793+r3dg33k@users.noreply.github.com>
Date: Fri, 21 Jul 2023 02:56:51 +0300
Subject: [PATCH 1/2] Create WordPress-ReadMe.bcheck

---
 other/files/configs/WordPress-ReadMe.bcheck | 27 +++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 other/files/configs/WordPress-ReadMe.bcheck

diff --git a/other/files/configs/WordPress-ReadMe.bcheck b/other/files/configs/WordPress-ReadMe.bcheck
new file mode 100644
index 0000000..fbd3d7f
--- /dev/null
+++ b/other/files/configs/WordPress-ReadMe.bcheck
@@ -0,0 +1,27 @@
+metadata:
+    language: v1-beta
+    name: "WordPress README file Exposure"
+    description: "Tests for WordPress README file exposed"
+    author: "r3dg33k"
+    tags: "exposure", "php", "wordpress"
+
+run for each:
+    # you could add more values to this list to make the check repeat
+    potential_path =
+        "/readme.html",
+        "/wp/readme.html",
+				"/blog/wp/readme.html"
+
+given host then
+    send request called check:
+        method: "GET"
+        path: {potential_path}
+
+    if "First Things First" in {check.response.body} and
+        {check.response.status_code} is "200" then
+        report issue:
+            severity: info
+            confidence: certain
+            detail: `WordPress README file found at {potential_path}.`
+            remediation: "Ensure WordPress is hardened."
+   		 end if

From 58aad6d21fe8820a85672f35a1c635eee077b0a3 Mon Sep 17 00:00:00 2001
From: r3dg33k <2913793+r3dg33k@users.noreply.github.com>
Date: Tue, 25 Jul 2023 21:10:49 +0300
Subject: [PATCH 2/2] Update WordPress-ReadMe.bcheck

---
 other/files/configs/WordPress-ReadMe.bcheck | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/other/files/configs/WordPress-ReadMe.bcheck b/other/files/configs/WordPress-ReadMe.bcheck
index fbd3d7f..138feaf 100644
--- a/other/files/configs/WordPress-ReadMe.bcheck
+++ b/other/files/configs/WordPress-ReadMe.bcheck
@@ -10,18 +10,17 @@ run for each:
     potential_path =
         "/readme.html",
         "/wp/readme.html",
-				"/blog/wp/readme.html"
+        "/blog/wp/readme.html"
 
 given host then
     send request called check:
         method: "GET"
         path: {potential_path}
 
-    if "First Things First" in {check.response.body} and
-        {check.response.status_code} is "200" then
+    if "First Things First" in {check.response.body} and {check.response.status_code} is "200" then
         report issue:
             severity: info
             confidence: certain
             detail: `WordPress README file found at {potential_path}.`
             remediation: "Ensure WordPress is hardened."
-   		 end if
+    end if